Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a58432ce-c722-3771-b9ca-2b70d83e39fa.roa
File: a58432ce-c722-3771-b9ca-2b70d83e39fa.roa (raw, json)
Hash identifier: u3xNrPDbNUgrYjVmyGMjvPM631vHhFAWbghPxN37T0k=
Subject key identifier: F7:19:1A:F9:6D:8F:79:BD:46:19:50:5A:D4:7F:6D:5E:BF:BE:37:8E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A88717E73414A2C4D95300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a58432ce-c722-3771-b9ca-2b70d83e39fa.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a8:87:17:e7:34:14:a2:c4:d9:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9bfcf2e7-a3b4-4f97-babf-86fbc77f1917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:ca:63:8e:23:1d:7a:78:e0:cc:00:17:42:
75:c8:37:2b:08:4f:bf:d2:c8:42:f4:63:9b:9d:13:
db:8a:8a:b8:bf:cc:96:a2:12:17:78:a9:1c:8e:33:
f6:1a:25:a2:66:49:2e:be:bf:ac:68:7c:b7:b2:01:
1e:dc:b4:03:f9:a9:a6:fe:6e:fb:6b:dc:63:5f:66:
a0:58:f4:a9:32:5b:4c:0c:87:5f:86:b4:0f:b6:9a:
2d:13:4e:31:b6:e3:c2:0b:61:ce:41:da:d6:d3:e8:
2e:ec:fd:57:b3:49:40:fc:17:83:ad:c8:f8:dd:b7:
27:a0:c6:5d:6a:e7:33:dd:a1:a6:e2:2b:49:b3:15:
64:98:90:f8:19:3a:84:5b:ce:e2:3c:e1:73:b8:0e:
6b:1a:36:56:0c:1e:30:08:08:78:5c:a6:23:07:d7:
69:b7:19:e3:9d:6e:05:8b:64:94:dc:65:e3:e2:a2:
4a:96:69:56:37:f4:cd:a5:76:c4:d0:d2:9d:42:06:
c4:33:7e:68:71:c0:32:d9:e9:e2:5e:a4:80:54:39:
80:3a:be:73:b6:91:9b:61:a7:df:2b:f1:e9:bf:7a:
f6:19:0e:c0:80:2d:4b:dd:29:02:4b:45:8c:d7:57:
a6:9c:da:b1:91:19:ac:39:a1:44:11:de:e0:ad:e1:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:19:1A:F9:6D:8F:79:BD:46:19:50:5A:D4:7F:6D:5E:BF:BE:37:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a58432ce-c722-3771-b9ca-2b70d83e39fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:44:01:8d:b6:56:dc:cc:2d:3e:aa:60:5f:ee:68:2c:3e:c0:
45:d1:4a:d7:fd:3d:c1:8c:01:43:b9:81:9b:6f:a3:9c:4c:6c:
2d:21:5f:11:71:ca:98:ef:9c:ae:43:91:8e:7f:43:c7:3b:bb:
be:2d:f3:3e:ab:15:65:a6:e3:e4:0d:05:45:2d:7a:29:75:61:
63:f4:ef:49:95:49:62:d1:66:c3:97:c0:84:7d:16:f2:81:86:
1a:f4:f0:61:23:80:f1:59:e9:4d:38:14:97:50:c8:06:de:8a:
40:f5:84:14:66:20:fe:12:fc:ff:15:a1:95:7c:f2:4f:d0:ae:
ce:ff:2f:7e:c1:fa:91:8b:e4:1e:b3:ff:48:2a:04:73:88:e1:
c3:b5:9e:1d:f6:2c:07:1b:57:c9:ca:e4:5d:36:9b:62:99:f6:
1f:a7:8c:56:71:cc:25:81:a4:fc:eb:13:17:6a:d6:97:c4:31:
c7:94:c5:2e:8c:ea:d9:49:7f:b3:32:aa:80:bf:36:32:2b:7d:
69:77:13:e4:ba:65:82:4f:1d:00:2a:2d:06:4c:8e:58:ce:4f:
66:ec:8d:df:a7:c7:a6:0c:71:e9:df:e8:bd:dc:0b:b0:cc:ca:
e2:9e:7f:2d:94:e3:f3:38:3a:92:de:f0:4e:43:5d:66:59:c5:
bf:b4:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org